Privacy

ComeFollow.ME is an independent study companion. It is not run by The Church of Jesus Christ of Latter-day Saints. This page says what we store, why, and what we don’t do with it.

Who this is for

The app is for individuals and families. Kid profiles sit under an adult’s login (Google, X, or email). Create or sign in to the adult account first, then add children.

How you sign in

You can sign in with Google, X (Twitter), or an email and password you create on ComeFollow.ME. Google and X send us an account id, and usually a name and email if your account has one. We never see your Google or X password.

Email and passwords

If you create an email account, we store the email address so we can find the login, send a verify link, and send a password-reset link. We do not sell it, and we do not use it for ads.

We never store the password you type. It is saved as a one-way scrypt hash with a random salt — we can check a sign-in against that hash, but we cannot read the password back. The password must be at least 8 characters.

You have to verify the email before you can sign in. Verify links expire in 24 hours. Reset links expire in 1 hour. Those messages come from noreply@comefollow.me (sent through Resend). The link has a one-time token, never your password.

After you sign in, a session cookie keeps you logged in. It is HttpOnly, Secure, and SameSite=Lax, so other sites and page scripts cannot read it. Sign-in, sign-up, and reset are rate-limited so guessing is slow.

What we store

Under that login we keep the household so it can follow you to another phone:

• Nickname, path (Primary / Youth / Adult), colors, and helper (MoMo, Clark, or none)
• Walk progress, streaks, Spirit Water, freezes, stickers, notebook notes, and verse bookmarks
• A family/group PIN if you set one, so the same login can protect switching people and group edits on every device. Don’t reuse a bank or email password. This PIN is not encrypted like a banking login.
• Your Crew code, friends you accept, friend requests, and gifts you send or receive (nickname and streak as your friends see them)

A copy also lives on the device so the app can open. Cloud is the copy that follows the login.

What we don’t do

• We don’t sell your information.
• We don’t run ads in the app.
• We don’t read your notebook to market to you.
• We don’t want your payment card. Optional Venmo donations leave our site and follow Venmo’s rules.

Who else can see something

People in your Crew can see the nickname, streak, and walk status you share there, and stickers or freezes you send. People in your household on the same login can see the family list. Gospel Library and Church websites you tap open on their site, under their privacy policy — not ours. Google, X, and Resend (email delivery) have their own policies for the parts they handle.

Kids

A child does not get a separate Google, X, or email login in this app. They are a profile on an adult’s account. The family PIN is meant to stop kids from switching users, adding or removing people, signing out, or clearing the device.

Keeping, deleting, and this device

Data stays while the login is in use. You can remove a person in Family/Group (that’s a confirmation). “Clear cache and resync” refreshes this phone from the cloud — it does not erase the cloud. Sign out and “unbind” take this device off that person; the household can still be opened on another device. To delete the whole login and its cloud data, use the account deletion page. Nightly backups may still hold a copy for up to 7 days.

Cookies and logs

We use a signed-in session cookie so you stay logged in (HttpOnly, Secure, SameSite=Lax). Servers may keep short technical logs (time, error, sign-in) to keep the app up. We don’t use them to profile your study.

We use Google Analytics to see which screens people open (home, a walk, settings). We send the screen name only — not your name, email, family code, notes, or who is walking. Ads and remarketing are off.

Changes

If this policy changes in a real way, we’ll date it here. Using the app after that date means you see the new version.

ComeFollow.ME is a small independent project. Scripture text and Come, Follow Me materials belong to the Church and are linked for study, not hosted as an official product.